CVE-2003-0637

Published Aug 2, 2003 CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Description
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 1:58 AM
Reserved
Aug 1, 2003, 12:00 AM
Status
Modified
Published
Aug 27, 2003, 4:00 AM
Modified
Jun 16, 2026, 10:02 PM